
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier: Y5hYmzaUX5Gh//jqlwrvRT8dG8IkZeB5v2BTW2aw/0M=
Subject key identifier: 93:BE:5F:10:8C:B4:4F:1E:49:9C:91:B0:03:99:59:7E:B7:20:B2:3C
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial: 0687
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number: 0671
Signing time: Sun 26 Jul 2026 23:30:22 +0000
Manifest this update: Sun 26 Jul 2026 23:30:22 +0000
Manifest next update: Sun 02 Aug 2026 23:30:22 +0000
Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: L4sbLm3g8HKrWDQXGWG76JJoX4uh4TwuS3rfFdHq20w=)
2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: JS+BkuUeBbAKOEIjpvSfqdX1PU3qVq3t7HBFZXPnHlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Validity
Not Before: Jul 26 23:30:22 2026 GMT
Not After : Aug 2 23:30:22 2026 GMT
Subject: CN=6a66988e-845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:61:2d:fb:b1:2a:31:0d:eb:47:81:9f:13:
f2:99:c2:c5:2f:ca:c1:42:5b:94:2e:96:90:8e:22:
9a:54:6f:16:a0:13:b6:c4:a4:42:5d:34:f4:4e:8b:
ae:58:88:d4:e4:7b:f2:33:1b:c0:33:4d:77:33:73:
93:7d:e8:a9:bc:7d:ad:74:a9:36:28:c9:40:da:81:
82:d2:4a:7f:da:d1:b6:43:4f:14:65:c2:4e:4a:f5:
cb:1f:4f:39:d4:67:c9:a0:60:6a:b6:1d:89:e2:93:
a0:22:0e:80:95:1d:42:0a:24:f9:76:ca:11:21:cf:
1f:21:ac:c6:c9:90:72:8e:18:d7:33:04:02:81:51:
42:04:1e:41:ee:b0:b0:9c:8d:65:7c:ba:ea:71:3d:
bb:a0:5d:50:5f:de:91:29:b0:38:5a:d9:0c:f5:86:
20:c8:7b:12:18:44:71:03:95:50:b9:4b:fc:3c:58:
4a:1d:65:46:fe:0a:5f:27:26:c6:d6:58:83:ac:aa:
46:9c:d8:50:8a:f9:3e:b0:90:81:fc:4c:81:2d:31:
3a:14:3b:9e:83:c5:f0:12:f4:20:d9:1b:2b:0c:a8:
58:ee:63:c8:24:0b:00:ca:8f:0e:b6:a0:04:0b:3e:
f8:08:55:eb:40:b7:ec:13:64:e6:cf:c7:24:a0:de:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:5F:10:8C:B4:4F:1E:49:9C:91:B0:03:99:59:7E:B7:20:B2:3C
X509v3 Authority Key Identifier:
keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:6b:b6:b4:55:e4:32:c8:3d:36:d6:f9:e2:42:13:20:10:ae:
1e:f8:8a:36:0d:2c:1e:70:bc:8e:8f:50:9e:af:f9:c4:1f:9c:
51:fa:2e:87:b6:1a:c1:f4:5f:b4:9a:d9:46:03:b5:ea:b5:1b:
d7:8b:46:be:83:94:4f:7d:2d:29:cd:f8:da:6c:09:b6:dc:20:
fc:30:7b:a7:c0:e1:d6:fc:5c:fd:e4:05:36:d3:34:06:0c:56:
3a:6e:d2:c3:24:3f:62:0e:d8:25:67:0f:59:42:83:9e:1c:c2:
f5:cc:18:3d:55:01:e0:bf:d7:7b:4e:ac:eb:a4:c5:99:2c:69:
85:d8:37:54:63:08:42:02:e4:62:7f:62:22:a0:93:0e:08:a1:
3a:58:45:17:78:bf:2b:bc:18:9d:43:ae:5a:e2:27:d8:78:19:
2d:de:70:ee:c1:62:64:2c:91:ef:6e:63:44:0e:b3:eb:8a:26:
ae:0c:90:24:c7:00:97:c6:93:da:94:b0:f9:35:1b:61:53:dd:
66:07:2a:4a:d3:d9:49:58:3c:92:15:28:63:26:70:45:9d:72:
bf:7b:96:bb:02:91:64:39:33:13:1b:71:d3:d2:e7:f4:8a:61:
f7:19:af:b5:0b:65:9e:2e:57:03:22:41:80:f6:cc:a5:39:7b:
c3:44:34:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0MxRUIxMTAvBgNVBAUTKDUzNEU2NzVFODlBQzlBQzMwMkY1MzBBMjc3NTI4Q0Y4
MUEzQzUzMDYwHhcNMjYwNzI2MjMzMDIyWhcNMjYwODAyMjMzMDIyWjAYMRYwFAYD
VQQDEw02YTY2OTg4ZS04NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RZhLfuxKjEN60eBnxPymcLFL8rBQluULpaQjiKaVG8WoBO2xKRCXTT0Touu
WIjU5HvyMxvAM013M3OTfeipvH2tdKk2KMlA2oGC0kp/2tG2Q08UZcJOSvXLH085
1GfJoGBqth2J4pOgIg6AlR1CCiT5dsoRIc8fIazGyZByjhjXMwQCgVFCBB5B7rCw
nI1lfLrqcT27oF1QX96RKbA4WtkM9YYgyHsSGERxA5VQuUv8PFhKHWVG/gpfJybG
1liDrKpGnNhQivk+sJCB/EyBLTE6FDueg8XwEvQg2RsrDKhY7mPIJAsAyo8OtqAE
Cz74CFXrQLfsE2Tmz8ckoN43GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO+XxCM
tE8eSZyRsAOZWX63ILI8MB8GA1UdIwQYMBaAFFNOZ16JrJrDAvUwondSjPgaPFMG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFQi9BQzM4NEFBNkRE
ODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21zTUM5VENpZDFLTS1CbzhV
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UwNW5Yb21zbXNNQzlUQ2lkMUtNLUJvOFV3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzFFQi9BQzM4NEFBNkREODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21z
TUM5VENpZDFLTS1CbzhVd1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgWu2tFXkMsg9Ntb54kITIBCuHviKNg0sHnC8jo9Qnq/5xB+cUfouh7YawfRf
tJrZRgO16rUb14tGvoOUT30tKc342mwJttwg/DB7p8Dh1vxc/eQFNtM0BgxWOm7S
wyQ/Yg7YJWcPWUKDnhzC9cwYPVUB4L/Xe06s66TFmSxphdg3VGMIQgLkYn9iIqCT
DgihOlhFF3i/K7wYnUOuWuIn2HgZLd5w7sFiZCyR725jRA6z64omrgyQJMcAl8aT
2pSw+TUbYVPdZgcqStPZSVg8khUoYyZwRZ1yv3uWuwKRZDkzExtx09Ln9Iph9xmv
tQtlni5XAyJBgPbMpTl7w0Q0DA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:07 2026 by rpki-client